$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json) Hash identifier: HSPs+7Jmsp0XGfrXZPAX3H2242tGgBQWc6dOjvUru8c= Subject key identifier: D9:7E:4E:D0:F7:C4:46:F8:3E:D0:53:11:AB:5F:E6:10:A1:96:B1:E0 Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Certificate serial: 056D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft Manifest number: 056D Signing time: Tue 16 Sep 2025 23:39:37 +0000 Manifest this update: Tue 16 Sep 2025 23:39:36 +0000 Manifest next update: Tue 23 Sep 2025 23:39:36 +0000 Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: iCIazLiDQwgxK9bMkhopHiy31A8+906tqTOmpG9YvH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1389 (0x56d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Validity Not Before: Sep 16 23:39:36 2025 GMT Not After : Sep 23 23:39:36 2025 GMT Subject: CN=68c9f539-1de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:ea:c9:a7:1f:21:d4:95:46:d7:45:15:62: ed:e7:a5:16:b1:ac:6e:41:b0:88:f3:d9:11:01:55: 6a:f2:c7:1a:68:35:c6:0f:28:c9:ef:4b:57:ce:1b: c5:21:2c:3d:53:f5:50:5f:76:d4:0f:15:cb:65:f3: 5a:ff:17:71:8b:58:60:d6:85:52:b5:e6:f9:98:1b: 6b:6c:e7:f8:e0:0b:24:07:86:ff:9e:08:2a:78:fe: 79:0d:97:33:6b:2e:08:66:52:96:83:46:e9:1d:d7: b4:60:ff:f8:cd:04:0c:41:a4:16:1e:1d:4e:51:3f: e7:ac:f8:34:4e:14:74:8a:d9:f1:aa:ad:4d:06:e4: bb:ef:9c:4b:37:2c:1c:b2:bd:18:96:3b:94:11:ad: 2e:87:a7:51:79:04:f8:e3:15:13:54:c8:96:14:ea: 9e:d4:f0:51:8a:ec:80:06:63:13:56:2c:1d:9b:15: 52:ef:42:78:eb:f5:3a:09:e2:e6:07:d6:6b:72:f5: bb:4f:a7:1e:ac:39:77:66:01:04:2b:6a:ca:df:cb: 29:4e:4a:df:0f:5e:22:d0:95:7b:f2:bc:fd:ac:0d: 78:64:e9:5f:3b:d8:cd:8a:1f:2b:18:cb:26:e1:70: fe:62:01:29:5c:5d:52:9c:88:20:6d:71:ed:ec:1c: bb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7E:4E:D0:F7:C4:46:F8:3E:D0:53:11:AB:5F:E6:10:A1:96:B1:E0 X509v3 Authority Key Identifier: keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:54:2f:5f:4f:4a:1d:1d:de:61:76:a7:96:3b:3f:de:08:1a: c7:74:5f:f5:5e:d4:95:4f:f6:f6:31:1f:6c:0c:cc:47:9e:b9: f3:28:50:f6:37:73:f6:1a:b1:c1:c1:f1:8f:d6:e7:23:08:70: 9d:95:bd:7c:86:17:ff:29:9a:df:db:ee:b6:e8:bd:9d:cb:e7: 3e:01:f2:e7:0f:0e:07:7f:5a:40:3e:3b:f3:e8:dd:72:65:36: ec:13:59:de:50:e5:28:59:2c:e0:e5:79:34:6c:39:f3:3a:91: 5b:a1:4e:ed:0e:4f:62:e7:7f:bd:55:4b:88:c8:12:f0:ce:f2: df:2c:4f:2b:d8:39:4f:d9:87:86:31:04:28:cd:8f:9e:42:17: 74:f9:28:44:16:e7:b0:b5:c8:c5:e5:dc:6b:22:86:45:64:c9: b2:70:26:97:0d:67:fb:11:57:63:24:26:c7:e2:9e:5c:a2:46: 29:a6:05:ec:57:61:8f:d3:c2:60:06:7a:91:f4:e8:9c:fc:26: ad:9a:8e:66:8b:69:36:44:49:32:1b:db:c5:db:f4:49:c8:bc: 35:8b:f2:ed:2d:e2:f9:6f:70:ce:67:fd:4f:be:5b:f0:64:44: 55:2e:48:9f:0c:b6:11:65:a2:75:fc:cf:01:0d:34:df:1f:11: a9:1c:cb:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3MDUxMTAvBgNVBAUTKDc1Rjc3MkU0MDZDNUY0NkQzRThCRjI3QUMxRjI1RkNG NjRFOTc5OTcwHhcNMjUwOTE2MjMzOTM2WhcNMjUwOTIzMjMzOTM2WjAYMRYwFAYD VQQDEw02OGM5ZjUzOS0xZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfTqyacfIdSVRtdFFWLt56UWsaxuQbCI89kRAVVq8scaaDXGDyjJ70tXzhvF ISw9U/VQX3bUDxXLZfNa/xdxi1hg1oVSteb5mBtrbOf44AskB4b/nggqeP55DZcz ay4IZlKWg0bpHde0YP/4zQQMQaQWHh1OUT/nrPg0ThR0itnxqq1NBuS775xLNywc sr0YljuUEa0uh6dReQT44xUTVMiWFOqe1PBRiuyABmMTViwdmxVS70J46/U6CeLm B9ZrcvW7T6cerDl3ZgEEK2rK38spTkrfD14i0JV78rz9rA14ZOlfO9jNih8rGMsm 4XD+YgEpXF1SnIggbXHt7By7vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNl+TtD3 xEb4PtBTEatf5hChlrHgMB8GA1UdIwQYMBaAFHX3cuQGxfRtPovyesHyX89k6XmX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzcwNS82RTI3N0JCMkY1 QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlHMC1pX0o2d2ZKZnoyVHBl WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmZHk1QWJGOUcwLWlfSjZ3ZkpmejJUcGVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzcwNS82RTI3N0JCMkY1QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlH MC1pX0o2d2ZKZnoyVHBlWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0VC9fT0odHd5hdqeWOz/eCBrHdF/1XtSVT/b2MR9sDMxHnrnzKFD2 N3P2GrHBwfGP1ucjCHCdlb18hhf/KZrf2+626L2dy+c+AfLnDw4Hf1pAPjvz6N1y ZTbsE1neUOUoWSzg5Xk0bDnzOpFboU7tDk9i53+9VUuIyBLwzvLfLE8r2DlP2YeG MQQozY+eQhd0+ShEFuewtcjF5dxrIoZFZMmycCaXDWf7EVdjJCbH4p5cokYppgXs V2GP08JgBnqR9Oic/Catmo5mi2k2REkyG9vF2/RJyLw1i/LtLeL5b3DOZ/1Pvlvw ZERVLkifDLYRZaJ1/M8BDTTfHxGpHMtf -----END CERTIFICATE-----Generated at Thu Sep 18 23:51:39 2025 by rpki-client